Jawatan ini telah ditutup, tetapi kerja yang serupa masih dibuka.

Job Title: Security Assurance & Reverse TPSA Manager

Contract: 1 Year Contract - Extendable/Conversion to Perm
Payroll: Client Payroll
Location: Bukit Jalil, KL
Budget: Maximum RM12,000/month
Nationality: Malaysians preferred; Expats can be considered
Experience: Minimum 5+ years; 8+ years ideal

Role Summary

The Security Assurance & Reverse TPSA Manager will be responsible for managing end-to-end client security due diligence and Third-Party Security Assessment (TPSA) activities.

The role will act as the central point of contact for client security questionnaires, Requests for Security Information (RFSIs), client audits and cybersecurity assessments. The candidate will coordinate with Information Security, Technology, Risk, Privacy, Legal, Compliance, Procurement and Business teams to provide accurate, evidence-based responses while ensuring compliance with information classification and disclosure requirements.

Key Responsibilities

• Manage end-to-end Reverse TPSA and client security assessment activities.
• Coordinate responses to client security questionnaires, RFSIs, audits and due diligence requests.
• Review and complete assessments covering cybersecurity, cloud security, data protection, operational resilience, business continuity and regulatory compliance.
• Coordinate with internal stakeholders to collect and validate security controls and supporting evidence.
• Represent the organisation//'s security and technology risk control environment during client discussions and security reviews.
• Translate technical security controls into clear, business-friendly responses.
• Maintain security evidence repositories, standard TPSA responses, certifications, attestations and compliance documentation.
• Ensure externally shared information complies with security classification and disclosure requirements.
• Support compliance requirements related to BNM RMiT, PDPA, ISO 27001, NIST and operational resilience.
• Track TPSA requests and ensure completion within agreed SLAs.
• Develop TPSA metrics and reporting dashboards.
• Identify recurring client security requirements and recommend improvements to the assessment process.
• Improve standardisation, automation and reuse of security assessment responses.

Primary Skills

• Third-Party Security Assessment (TPSA) / Security Questionnaires
• Security Assurance / Information Security Governance
• Technology Risk / Cybersecurity Risk Management
• Security Governance & Compliance
• IT Audit / Third-Party Risk Management
• Client & Stakeholder Management

Secondary Skills

• ISO 27001
• NIST Cybersecurity Framework
• SOC Reports
• BNM RMiT
• PDPA Malaysia
• Cloud Security
• IAM / Access Management
• Business Continuity & Disaster Recovery
• Operational Resilience
• Data Privacy & Protection
• Security Evidence & Control Documentation

Required Experience

• Minimum 5+ years of relevant experience; 8+ years preferred.
• Experience in Information Security, Technology Risk, Security Governance, Security Assurance, IT Audit or Third-Party Risk Management.
• Hands-on experience managing security questionnaires, TPSAs, client due diligence or similar security assurance activities.
• Strong experience coordinating with multiple internal stakeholders to collect security information and evidence.
• Strong written and verbal communication skills.
• Ability to explain technical security controls to business and non-technical stakeholders.
• Strong analytical, documentation and stakeholder management capabilities.

Preferred

• Experience in insurance or financial services.
• Experience in customer-facing security assurance roles.
• Experience supporting enterprise/MNC client TPSAs.
• Certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer or CCSP.